EUVD-2025-53903

Malicious code in hushed-yellow-pike npm...

EUVD-2025-52344

Malicious code in religious-yellow-tapir npm...

EUVD-2025-52968

Malicious code in obnoxious-yellow-alpaca npm...

EUVD-2025-51709

Malicious code in sudden-yellow-firefly npm...

EUVD-2025-52316

Malicious code in representative-yellow-mastodon npm...

EUVD-2025-55156

Malicious code in cooperative-yellow-crab npm...

Malicious code in improved-yellow-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dee708b72007ae81d4c195984d449a2d1d90e946ea51e149509d98652839f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52082

Malicious code in shaky-yellow-kangaroo npm...

Malicious code in circular-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd48e4515f4491e495e1f80799832ef20aeb3b01c3e2bbbd614bbecf6c6e210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53988

Malicious code in helpful-yellow-guineafowl npm...

EUVD-2025-54456

Malicious code in extensive-yellow-weasel npm...

EUVD-2025-53161

Malicious code in motionless-yellow-guppy npm...

MAL-2025-67148 Malicious code in characteristic-yellow-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eae3bb6c330c442f66a1a4d3e1fa3bf2913828392c4f3d4cb272176cc5f550d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70620 Malicious code in silent-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8212fa9469c7d9e47bb081f002dd791bb63353c9c66be7e9b0177a747e71205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71151 Malicious code in top-yellow-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c377d19d27521e4dc0c083d30f73aa6b5f83497cbcae5b66a72cc500ba58c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70680 Malicious code in slow-yellow-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62aa9f640e14544b120b8f998aab916359759a6e4baaf0e3e642a5b064c1dbe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53270

Malicious code in mid-yellow-wildebeest npm...

Malicious code in frequent-yellow-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae8b4af95746bd245e417745910e33447d1ae99c6f5f983ac4d43539b881569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52377

Malicious code in related-yellow-stork npm...

MAL-2025-66635 Malicious code in added-yellow-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568bc83f8d86902bef6a426fb870cfffffdb138470f82249a4a834c8c6a427ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...